Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 19:10

General

  • Target

    42a5694b85016eff83c1794432b9dbbd_JaffaCakes118.html

  • Size

    27KB

  • MD5

    42a5694b85016eff83c1794432b9dbbd

  • SHA1

    0f9906bd496e6a8814475871af89a211e4b5ca69

  • SHA256

    a5c1a980692f23bbe57b41b2e8ee5c8ebd56af065df9ffdfed2c71a3efdd6a60

  • SHA512

    b20cef2578493c8bf8f88f5d9c3220d85a856c7391b07e22fec7b182976d06058237b15c5ac416328ce0c39fa43e4bf7b254bba5baafd2440ef3e171bc936e03

  • SSDEEP

    192:uwL8b5nYWnQjxn5Q/LnQieqNnmnQOkEntZdnQTbnJnQ9ewam6MhmgQl7MBKqnYnM:VQ/2pyGmDSkXa

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\42a5694b85016eff83c1794432b9dbbd_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2000
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2000 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2504

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    868e9e7e3b68c2e0cbb74895729fb163

    SHA1

    1a5539afbb8f8d7d704b986814304df7ef523492

    SHA256

    2fd0bf638ece6f6fc015cec4ea0f45e7a7d37284b9121a3c7427fa487c3e6cb2

    SHA512

    c3fe756777bdd07441b952ca341e577d76abb0ed0830ddb5d4087a49dcea5b74985ecdc89651096fda5babff5d26331a500699a2f9a44f934a24297327081f15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2fb843d662cf98584e34b3c0227d71f2

    SHA1

    5b844e38ddb35b1d96ebb6a7bc8e65823a1362c4

    SHA256

    1e6a8fa281c5047ac2302527ae3193fb5d8662e2715d00bc46beb43e9bed64a8

    SHA512

    17d26ef2606aa261fc425e55d7ce03dfdf7a8ba34bb4de0b56428c95eac2146eda3dcde7db0fa4b611f802e3863572cdc79b36d68efbb17d54a9059d3896e926

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b564bb640ae86b291d45ab7c617c58f6

    SHA1

    7be0f94562cb7a592330dcff58300b3c81d200ca

    SHA256

    3e957f68d3ce5284fd202223191e26b34e9b242a85ec41f8b73c88fb160edbd1

    SHA512

    e271e42567ae9d59ea2496676fbe35525142a7c38e8479e8ac58fcbd85d0adff115bf0ec43c8ff068c530dcf013c297b652ef2718463080f0bfe94a50bc1a528

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    893516b81d9f72d62ff58d15f0435252

    SHA1

    e93676bfce378e873b3fc6f3385731479a7430b0

    SHA256

    e3e446586d01f0e7ea46a00bd04701af461ed26e3272d0c078c26f7744982197

    SHA512

    3202ff3f0830cc8d12b32888b6bd2f9208dda507ba1a9db851e77d0c1189899a8dccb5305c423a4e0d05ac93045cfcba620814c5b765b34fcab63c91919b1910

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f01644ea1f10231133f102eca457f03c

    SHA1

    62a6e4e05e9b31975bab4593cd6f860750df3c69

    SHA256

    4f16db14f748996d36f6e53d4bd388c365a5a538bf8dc1d402813b736c1804ca

    SHA512

    1bb1c024e7a7e3316a9077f0e3b976f0015cfb0f104067a2114edfa07b44e754d32536f7073881cf513395c0758c8fe902402be35f26f9e7b2d8806118b00d68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1251e87e7af1cd6c475a3795600ab93

    SHA1

    32caae8c72cdcef9b9340bc0fb16e20332d430bc

    SHA256

    b321b2ac51f8b712e8157d8a70f006187f33cdf0f61b31760635d39354481e89

    SHA512

    7517bc4c2ac3d251e2ad79c69f56a492841868d982f98bb0bd66fd8e7910d6aa13801e99a51be3be228980863568b37bc41868122b1305305d6c25437e3e7dd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23e7c5f11027bcdadcedd1b722186905

    SHA1

    f79240299298b33952fae35ffb3551f52f027706

    SHA256

    fc7bd5e40867d0577893d20bddee26ab73b02a428cbf2bba8e5845483b942f74

    SHA512

    edc6d5a0f981d4124f8f50b25d45f67f4b91cf3454fffff083c073c07a621355834fe64c2b2eb4367b7eeb24cc82cbb01fbeac744c3b41ef355c8166d4b8ac2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a94e9bbd5ef94473415b910c6e5f1ae2

    SHA1

    c98f623a52c2088e17ccbb2b7886511952375996

    SHA256

    00d819cd2a93051966973c1186154d42a4fa2cda383c2a8845c67e7b6ea11304

    SHA512

    e269e0c264a0bea25c0b27a55e617e227b26a69f2dbc96614f7a88c2b74895cb18231967d00e2b83a29af82bbb6325d595f604cfca0146aeb0a64f154fab15fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    844923e417abef731facfbdb4fad40f8

    SHA1

    7950dfd5e3d7102a1f3d859dcd82051cf9a48956

    SHA256

    a1d22fc615fc8ae6543f955c663a8484d8dd0f5df4c3a12941c1bd22e4a48fe6

    SHA512

    840c827311ff132864c43d8a2b3782ad249d1dd16ffed05ec99d34d92229b6a3c57ba0decf10e9cdeac6640e9c23591541d9eb823ccd36b6aaeb46a453f88fbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9afef624ca6b03f1ead21ca2a8fb1727

    SHA1

    d4fce8f0a5f3ebfd60ba12ace5011aae34ebb9a3

    SHA256

    a201dfb582cd28217339c4ac528d298eaa7ac52857ccd8c4b9b0066ae5a88818

    SHA512

    5632353bf919c32bec67c582eea02c9f1aa42db200d137cc4ed2ced1ead7862d1675bb6afb34067a817a1e6196a9e517088d72b29c2cbf1235e1b1d30804ca20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e27a1151bbd11a7d447b195b56ea5bb

    SHA1

    7f10f1246714f1cd1167b85e43e972fc1b0a0e74

    SHA256

    da28c40f6823d9a9ecd54d89ab1fed0ac1603c476aa736431441a0e8902945de

    SHA512

    dad59aab1d949b58733abf1a2420a2363c454c847e1db4af790955941ac798560c9a29733a12094b9effa4097a53a53117c55c6625506d0d5845731e8790705b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab38a03d445268f82d60823d53a1938c

    SHA1

    d59957ff1ad190bb254d830e0d44da3d94847216

    SHA256

    bc4e19fdb5e2d8c60024ec52e9323b5c8b8fce159df1b7310f6156432a5d6a9f

    SHA512

    641c8f8209ab849275ad0f98025281d9fc700b55d466d4c63db66c6287f674878f3316966e5dd94303adeccace3e931a61870b50251de300ec0389c484e919df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bebb441c696c241b625deeb29a71bccd

    SHA1

    a3257ce9f04ad268d5c5cc292adbfad0bd787324

    SHA256

    f3af49ce0151b3f51f2a2cc9a690bd29bf4c86028cf87e905f8892868757219c

    SHA512

    e0e68f70f747b129cefab57a821f3710fd32b21c3b8b260bebbb83eca63073541381baa7432111f14c07895a3d0bae79a769fda4cda5defe17f1b76c22be8b8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09ee0997d68ed23a25e049f421b57898

    SHA1

    d8bc3023542eebde3d86c9fd5137b8edc2acee22

    SHA256

    d5393bbb074afa19ef040817a552e18b26d9b172dfcbc6b3bfa9eebb37739c5a

    SHA512

    f5f407bb3dfcff89f1fab48694f1440956dcc0fdf3ebf02255841c24dccdb8bed8b37d47201a0ca3bc785ad968e8d393de3367376099e2f44376919556f570c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56e48dcc5d2a9595df9127c968dd8b1c

    SHA1

    a0793d5f821b4bda6c846db44a4e5b6a52c85a51

    SHA256

    4fced0642a65d0c6fbbb2dfbeb39c248564e197737866930897c178cd229e5cf

    SHA512

    6b32be793e03b8864c26794ec7af959f5e2e909f13710e15a14b465e04edd78afdbecf5a235920fd78b3cabce998ac97d3b4474aed0cbfe6e37dcf19bbb6ac6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8282d9764a3217cbd16d7b0837ac67dc

    SHA1

    5b3ab5fb2e4aa852a7002b696e36f1e07744040f

    SHA256

    9acdcc55acf487ba38284bdee910e8fed1754e47e076faebd0448c636be9d371

    SHA512

    4ae8d9a30b8bf3594f31a1d35a3f8e9381b02bb18249af956aeb382810d020896c4bbb5978a07f3f26262da90cb8c47bb43829c53f01af8a0a8afb396b5c11c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2dcc86ce7c5ad4cffbf1e6cd99a7e275

    SHA1

    b9c55a96c0790e3e7f24fb945d0633e26272f396

    SHA256

    a87943e4f35014b8691e539d59afcf4b1042c71715d6694841c6b28332148da9

    SHA512

    f2736bb1d836e26bcbd469e03d4b1dc6234d20d89a0c7254ce4e2a9e61e6986b28e77edd3e4f1ef2d5c3448e79368c700fa243d5c3b96ed0110eea010c53b28f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b847eadaf3d731737aa1aa0cc728ccd4

    SHA1

    81ddc11b673139bf854fe9566d7e8bcf73e4c370

    SHA256

    02541066adc41e5083236bc5a49d6bbc7c1ec987681567253711784fce10e920

    SHA512

    9c9f229ec4ac42937fe735ade9b519ecb6d3d8c697191eb50ab9a7a3c911e37c9d490c1cc590fc060adba619bf2f481084a6511b4da13151af4e07f5b51e594e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    539ff983b53e58ed0409368739de4ce0

    SHA1

    27fe4ac205da23f81dc1575f8346e60bdc21b692

    SHA256

    4304059dd5bf7e28fe9742215e0d90a32dda4e27f4ceca29432c6287601188f5

    SHA512

    7376640c73b730996d3f800a7305a2c0839ba81da70c54316ce3b087e9e8d82994366bae68925b484166957ebe9374cfa3cc48cae56ebb3f7b901de5db1a4a8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5662958eb7d5bc2e1766bc9fde57bdc1

    SHA1

    f455c42b4e766371fb9c59ca17ccb3ede979562a

    SHA256

    67e5e0695ff628d196d66ba137d5128c60184b7f657e6a5d9b3c5ce1bda6201c

    SHA512

    9a889aca16f90a0cad13d0a0f0fecb05268cb15a17940e57599d80416f5402308400dff7bcac67e5359284bbebe3ed05b17669cab8818a9383173d9a86be4ddc

  • C:\Users\Admin\AppData\Local\Temp\Cab4403.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4525.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a